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Currently,  Full  Authority  Digital  Engine  Control  (FADEC),  based  on  a  centralized 
architecture  framework  is  being  widely  used  for  gas  turbine  engine  control.  However, 
current  FADEC  is  not  able  to  meet  the  increased  burden  imposed  by  the  advanced 
intelligent  propulsion  system  concepts.  This  has  necessitated  development  of  the  Distributed 
Engine  Control  system  (DEC).  FADEC  based  on  Distributed  Control  Systems  (DCS)  offers 
modularity,  improved  control  systems  prognostics  and  fault  tolerance  along  with  reducing 
the  impact  of  hardware  obsolescence.  Some  of  the  challenges  to  be  dealt  with  are  selection  of 
communication  architecture,  high  temperature  electronics  and  logical  functional 
partitioning  of  centralized  controller.  In  this  paper,  we  propose  Decentralized  Distributed 
Full  Authority  Digital  Engine  Control  (D^FADEC)  based  on  a  two  level  decentralized  control 
framework.  The  effect  of  decentralized  controller  on  system  stability  and  robustness  through 
the  Packet  Dropping  Margin  (PDM)  has  been  studied.  A  design  method  is  proposed  to 
decouple  the  centralized  controller  into  different  subsystems,  thus  reducing  the  effect  of 
interactions  between  the  subsystems.  It  is  shown  that  PDM  is  largely  dependent  on  the  closed 
loop  controller  structure;  hence  use  of  a  controller  in  a  decentralized  framework  improves 
the  PDM.  Also,  a  FIOO  gas  turbine  engine  example  is  used  to  show  that  PDM  can  be 
improved  by  partitioning  the  centralized  system. 
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1.  Introduction 

Development  of  gas  turbine  engine  eontrol  began  in  the  early  1940s.  Initially,  engine  eontrol  was  exeeuted  using 
a  hydro-meehanieal  governor  for  fuel  metering.  However,  as  the  engines  beeame  more  eomplex,  the  eontrol  task 
evolved  to  beeome  more  demanding  and  eomplex.  With  the  advaneement  of  solid  state  eleetronies,  analog  eireuits 
were  used  for  high  level  supervisory  eontrol,  trim  and  other  non-eritieal  funetions.  Development  in  modem  eontrol 
theory,  inereased  reliability,  ease  of  maintenanee,  flexibility  of  eontrol  algorithms  and  advaneement  in  digital 
eleetronies  motivated  use  of  digital  eontrol  systems.  This  led  to  development  of  Full  Authority  Digital  Engine 
Control  (FADEC)  whieh  beeame  the  industry  standard  for  eommereial  and  military  jet  engines.  In  reeent  years, 
inereasingly  sophistieated  eleetronies  have  been  added  to  the  engine  eontrol  system  for  addressing  the  needs  of 
inereased  performanee,  wider  operability,  and  redueed  life-eyele  eost.  Control  systems  are  now  designed  to  perform 
various  other  funetions  ineluding  engine  diagnosties  and  health  monitoring.  This  has  driven  the  need  for  a  new, 
advaneed  eontrol  system.  Aeeordingly,  a  Distributed  Engine  Control  Working  Group  (DECWG)  was  formed  to 
study  and  develop  a  new  Distributed  Engine  Control  (DEC).*'^ 

A.  FADEC  based  on  centralized  Control  System  (CCS)  Architecture 

In  the  traditional  Centralized  Control  System  (CCS)  eonfiguration,  the  eentralized  eontrol  proeessor  handles  all 
proeessing  funetions,  ineluding;  the  operating  system,  task  seheduling,  I/O,  proteetion,  eommunieation,  and  eontrol 
algorithms.^  All  eomputations  are  performed  by  a  single  eontroller  and  the  eontrol  signals  are  transmitted  to  eaeh 
individual  aetuator.  The  transmission  of  eontrol  signal  is  through  individual  analog  eonneetions  with  eaeh  sensor 
and  aetuator.  FADEC  houses  the  eleetronies  required  for  data  aequisition  and  signal  eonditioning.  In  order  to 
provide  required  safety  and  reliability,  dual  ehannel  eommunieation  links  are  used.  Figure  1 
shows  an  engine  eontrol  system  based  on  eentralized  arehiteeture. 


Figure  1.  FADEC  based  ou  ceutralized  architecture 

The  optimal  loeation  for  the  FADEC  in  order  to  reduee  the  wire  harness  length  is  near  the  eombustion  ehamber. 
However,  this  is  not  praetieally  possible  as  extra  shuetural  rigidity  has  to  be  added  to  proteet  it  against  high 
temperature  and  vibrations.  Henee,  the  FADEC  is  plaeed  on  the  aireraft  engine  fan  ease,  whieh  inereases  the  wire 
harness  length.  As  data  eommunieation  is  analog,  the  wire  harness  and  eonneetors  have  to  be  shielded  from  noise 
and  signal  attenuations.  This  shielding  inereases  the  eontrol  system  weight.  The  operational  life  of  FADEC  is  one- 
third  of  the  engine  life.  As  the  FADEC  uses  non-standard  input/output  interfaees,  it  is  not  easily  upgradable.  This 
inereases  obsoleseenee  eost  of  engine. 
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Figure  2.  Schematic  diagram  of  current  centralized  FADEC 

Figure  2  illustrates  point-to-point  analog  eonneetions  with  sensors  and  aetuators.  We  ean  see  that  while  most  of 
the  proeessing  is  done  by  the  FADEC,  it  is  diffieult  to  embed  intelligent  eontrol  direetly  into  sensors  and  aetuators. 
Also  it  is  diffieult  to  fault-eheek  the  eleetronie  eomponents  of  the  FADEC,  whieh  inereases  engine  down-time. 
Analog  eommunieation  and  of  proeessing  power  limitation  do  prohibit  advaneed  eontrol  algorithms. 

Researeh  is  been  earried  out  to  make  aireraft  propulsions  systems  more  intelligent,  reliable,  self-diagnosties,  self- 
prognosties,  self-optimizing  and  mission  adaptable  while  also  redueing  the  engine  aequisition  and  maintenanee  eost. 
Advaneed  teehnologies  like  Blended  Wing  Body  (BWB),  Extreme  Short  Take  Off  and  Landing  (ESTOL),  ete. 
require  use  of  high  performanee  intelligent  engines.  Ineentives  like  reduetion  of  weight,  reduetion  in  overall  eost 
and  inerease  in  performanee,  led  to  the  formation  of  Distributed  Engine  Control  Working  Group  (DECWG). 
National  Aeronauties  and  Spaee  Administration,  Glenn  Researeh  Center  (NASA  GRC)  and  industry  eame  together 
through  this  group  to  study  the  eurrent  and  future  propulsion  system  requirements.  They  studied  Distributed  Engine 
Control  (DEC)  based  on  Distributed  Control  Systems  (DCS),  whieh  had  high  benefits  while  adhering  to  the  related 
eontrol  system  and  engine  eonstraints.  Distributed  eontrol  is  a  meehanism  for  the  proper  implementation  of  systems 
engineering  proeesses  in  engine  systems  based  on  open  systems  standards. 


B.  FADEC  based  on  distributed  arcbitecture  (DCS) 

In  Distributed  Engine  Control,  the  funetions  of  FADEC  will  be  distributed  at  the  eomponent  level.  Eaeh 
sensor/aetuator  is  to  be  replaeed  by  a  smart  sensor/aetuator.  These  smart  modules  will  inelude  loeal  proeessing 
eapability  to  allow  modular  signal  aequisition  and  eonditioning,  digital  data  bus  eommunieations  and  diagnosties 
and  health  management  funetionality.  A  serial  eommunieation  network  will  be  used  to  eonneet  these  smart  modules 
with  FADEC.  With  a  use  of  sueh  arehiteeture,  huge  savings  in  weight,  perhaps  to  the  order  of  50%,  are  expeeted."* 
There  are  no  restrietions  on  the  loeation  of  the  DEC  unit,  therefore  it  ean  be  plaeed  at  a  loeation  where  it  is  subjeeted 
to  less  vibrations  and  hostile  environment.  This  will  reduee  the  design  eomplexity  redueing  the  weight  and  thermal 
eonstraints.  Figure  3  shows  an  engine  eontrol  system  based  on  distributed  arehiteeture. 
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Figure  3.  FADEC  based  on  Distributed  architecture 


C.  Benefits  of  Distributed  Engine  Control 

1.  Weight  Reduction  of  propulsion  control  system 

Approximately,  50%  of  the  eleetronie  eireuitry  in  a  eentralized  FADEC  is  involved  in  proeessing  of  analog 
information.  With  DCS,  estimated  reduetions  in  volume  and  weight  of  FADEC  are  on  the  order  of  50%.  This 
reduetion  in  weight  is  assuming  that  the  FADEC  is  engine  mounted.  Flowever,  due  to  digital  eommunieation,  the 
FADEC  ean  be  mounted  at  a  loeation  in  the  aireraft  where  the  eonditions  are  less  hostile,  thus  redueing  the 
weight  by  a  greater  extent.  A  typieal  gas  turbine  engine  has  15  sensed  inputs  (typieally  5 -wire)  and  seven 
eontrolled  variables  (typieally  14-wire)  whieh  are  dual  redundant  and  shielded  against  eleetromagnetie  and 
environmental  effeets.  Replaeing  these  point-to-point  eonneetions  with  serial  eommunieation  wire  harness  eould 
result  in  eonsiderable  savings  in  wire  harness  and  eonneetor  weights. 

2.  Modularity 

One  of  the  main  benefits  of  using  DCS  is  the  use  of  open  system  standards  for  its  implementation.  A  modular 
system  (i.e.  smart  sensor,  smart  aetuator  or  even  a  FADEC),  ean  be  easily  replaeed  or  upgraded  with  a 
funetionally  equivalent  eomponent,  without  modifying  the  remaining  system.  This  allows  user  eustomized 
design  of  a  DEC.  This  modularity  applies  to  both  hardware  and  software. 

3.  Obsolescence  Reduction 

The  Life  eyele  of  a  FADEC  is  around  8  years  while  engine  life  exeeeds  20  years.  As  eleetronies  improves, 
the  FADEC  has  to  be  either  redesigned;  or  old,  obsolete  eleetronie  eomponents  have  to  be  used.  As  a  result  it  is 
very  eostly  to  redesign  or  replaee  FADEC  for  eentralized  eontrol  systems.  Flowever,  due  to  DEC  modularity,  the 
amount  of  hardware  whieh  must  be  redesigned  is  minimized.  Only  the  obsolete  eomponent  ean  be  replaeed.  This 
reduees  the  obsoleseenee  eosts. 
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4.  Improvement  in  Engine  System  Performance 

Engine  performance  is  judged  in  terms  of  emissions,  noise,  thrust  efficiency,  operability,  time-on-wing, 
safety.  A  DEC  will  allow  high-response  adaptive  control  technologies  (such  as  compressor  stability  control)  to 
be  implemented. 

5.  Cost  Reduction 

Overall  cost  of  the  engine  can  be  subdivided  -  into  acquisition  cost,  operating  cost  and  maintenance  cost.  A 
DEC  is  believed  to  have  a  positive  impact  on  all  of  the  above  costs.  As  a  DEC  is  based  on  open  system 
architecture,  there  is  commonality  among  the  system  components.  This  lowers  the  development  cost  and  in  turn 
the  acquisition  cost.  Weight  reduction  increases  fuel  efficiency.  This,  along  with  the  high  rate  of  system 
availability,  decreases  the  operating  cost.  Due  to  distributed  architecture,  maintenance  cost  is  also  reduced. 
Faulty  components  can  be  easily  located  and  replaced,  decreasing  the  maintenance  time. 


Figure  4.  Schematic  Diagram  for  FADEC  based  on  DCS 


The  distributed  control  approach  will  be  inherently  more  powerful,  flexible,  and  scalable  than  a  centralized 
control  approach.  Flowever,  there  are  major  technical  challenges  to  the  realization  of  DEC.  Fligh  temperature 
electronics,  selection  of  appropriate  communication  architecture,  and  partitioning  of  the  centralized  controller  are 
some  to  name  a  few.  Silicon-On-Insulator  (SOI)  is  one  of  the  promising  high  temperature  electronics  technologies. 
The  operational  temperature  for  SOI  is  in  the  range  of  225  "C  to  250  “C.  For  a  temperature  higher  than  this,  the 
technology  is  still  in  development  stage.  It  is  projected  that  use  of  Silicon  Carbide  electronics  will  enable  use  of 
electronics  at  temperatures  above  600  °C.  In  DEC,  the  appropriate  selection  of  communication  architecture  is  very 
important  as  the  performance  of  the  DEC  will  be  dependent  on  the  performance  of  the  communication  network.  The 
network  must  have  sufficient  bandwidth  and  latency  to  enable  closed  loop  control.  It  must  also  be  robust  to 
accommodate  the  safety  and  critical  functions.  In  the  following  section  we  give  the  methodology  for  design  of  DEC. 
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II.  Methodology  for  design  of  DEC 

We  can  have  two  design  approaches  to  DCS.  In  first  approach,  we  can  partition  the  centralized  controller  to 
achieve  optimum  performance  of  subsystems,  and  then  select  the  communication  architecture.  In  the  second 
approach,  we  can  first  select  the  communication  architecture  which  is  desired  for  the  distributed  system,  and  then 
partition  the  controller  given  the  communication  constraints.  In  this  approach,  we  can  make  use  of  commercial  off- 
the-shelf  components,  reducing  the  design  time  and  cost.  Hence,  this  approach  is  followed  in  this  research. 
Accordingly,  the  first  task  is  to  select  the  appropriate  communication  architecture  (protocol)  for  safety-critical 
turbine  engine. 

A.  Communication  Architectures 

For  safety-critical  DCS,  there  is  a  clear  preference  for  time-triggered  protocols  over  the  event-driven  protocols. 
Time-triggered  protocols  offer  high  level  of  reliability  with  fault- tolerance.  These  architectures  ensure  that 
maximum  bus  loading  stays  at  prescribed  levels  and  also  provides  efficiency,  determinism  and  partitioning.  Some  of 
the  off-the-shelf  time  triggered  protocols  are  MIL-STD-1553,  SAFEbus,  FlexRay,  CAN,  SPIDER,  Time  Triggered 
Protocol  TTP/C  and  IEEE  1394b/Firewire.  Out  of  these  architectures,  TTP/C,  developed  by  University  of  Vienna, 
has  clear  advantages  over  the  others. Some  of  the  requirements  of  communication  architecture  for  DCS  are  that  it 
should  support  fault  detection,  isolation,  and  recovery  (FDIR)  and  health  monitoring;  should  be  highly  modular, 
with  high  reliability,  should  be  easy  to  maintain  and  finally  should  have  low  overall  cost.  All  these  requirements  are 
best  met  by  TTA.  The  TTA  developed  by  University  of  Vienna  uses  a  time -triggered  communication  protocol  called 
TTP/C.  TTP/C  is  specially  designed  for  the  safety  critical,  hard  real-time  distributed  control.  As  the  protocol  is 
master-less,  it  enables  the  communication  between  nodes  to  continue  even  when  there  is  a  failure  in  any  of  the 
nodes.  Also  the  communication  rate  provided  by  the  current  TTP/C  meets  the  demand  for  real-time  control 
requirement  of  safety  critical  vehicle  subsystems.  Along  with  high  transmission  rate,  TTP/C  has  high  data 
efficiency,  error  detection  with  short  latency,  a  fault-tolerant  clock  synchronization  service,  and  distributed 
redundancy  management.  This  architecture  can  tolerate  multiple  faults  and  high  degree  of  temporal  predictability. 
One  of  the  main  advantages  of  TTP/C  is  the  availability  of  the  commercial  off-the-shelf  components.  This  reduces 
the  overall  cost  of  implementation  of  TTP/C  making  it  a  cost  effective  solution.  Accordingly,  the  use  of  TTP/C  for 
DEC  is  suggested."'  Considering  TTP/C  as  the  communication  architecture,  we  will  now  focus  on  the  design  aspects 
ofNCS. 


B.  Networked  Control  Systems  (NCS) 

DCS  have  multiple,  independent  processes  and  the  output  of  any  distributed  process  is  based  on  the  quality  of 
input  data  which  must  be  transmitted  accurately  and  without  any  delay.  Distributed  Engine  Control  Systems  can  be 
viewed  as  a  Networked  Control  System  (NCS)  with  distributed  sensors  and  actuators.  Here,  the  control  loops  are 
closed  through  a  real-time  communication  network.  This  addition  of  a  communication  network  in  the  system 
introduces  complexity  in  the  design.  There  are  various  factors  introduced  as  a  result  of  a  communication  network. 
They  include  network  induced  delay,  packet  dropouts,  and  bandwidth  constraints,  which  have  to  be  considered  for 
ensuring  desired  functionality  of  the  NCS. 

1.  Network-induced  Time  Delay 

Transmission  of  continuous  time  signal  over  a  network  consists  of  data  sampling,  data  encoding,  data 
transmission  and  data  decoding.  The  total  network  induced  time  delay  consists  of  network  access  delay  and  network 
transmission  delay.  Network  access  delay  is  the  time  taken  for  the  shared  network  to  accept  data.  Network 
transmission  delay  can  be  further  subdivided  into  sensor-to-controller  delay  and  controller-to-actuator  delay. 
Network  transmission  delay  can  be  either  constant,  time  varying  or  random  depending  on  the  network  congestion 
and  channel  quality.  In  the  selected  TTP/C  architecture,  the  likelihood  of  time  delays  is  reduced  by  using  clock 
synchronization,  transmission  window  timing  and  group  membership.^  In  this  paper,  it  is  assumed  that  time  delays 
are  less  than  the  predetermined  threshold.  Whenever  the  delay  is  more  than  threshold,  the  packet  is  dropped,  and  a 
new  packet  is  transmitted. 

2.  Constraint  on  Channel  Bandwidth 

The  capacity  of  the  communication  network  to  carry  a  finite  amount  of  information  per  unit  amount  of  time  is 
known  as  channel  bandwidth.  The  current  available  hardware  supports  25  Mbit/s  synchronous  and  5  Mbit/s 
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asynchronous  transmission  and  transmission  rates  of  1  Gb/s  have  been  tested.  The  transmission  rate  provided  by  the 
current  TTP/C  meets  the  demand  for  real-time  control  requirement  of  safety  critical  vehicle  subsystems. 

3.  Packet  Dropouts 

Packet  dropouts  occur  due  to  packet  collisions  or  node  failures.  Although  the  time  triggered  protocol  ensures  that 
packet  collisions  do  not  occur  (as  each  node  can  transmit/receive  data  only  during  the  predetermined  time  slot)  the 
network  is  still  subjected  to  node  failures.  When  a  node  failure  occurs,  (instead  of  repeating  retransmission  attempts) 
it  is  advantageous  to  drop  the  old  packet  and  transmit  a  new  one.  In  single  packet  transmission,  packet  drop  can  be 
viewed  as  loss  of  all  of  the  state  information,  and  in  multiple  packet  transmission,  as  the  loss  of  partial  state 
information.  Although  feedback  control  systems  can  tolerate  packet  dropouts  to  some  extent,  it  is  important  to 
analyze  the  system  stability  and  performance  under  packet  dropouts. 

The  membership  mechanism  of  TTP  is  capable  of  detecting  any  kind  of  communication  fault  that  is  not  already 
detected  and  handled  by  other  means.  These  communication  faults  include  transmission  and  reception  faults.  If  a 
node  fails  to  transmit  (which  is  typically  due  to  noise  during  the  transmission),  it  is  removed  from  the  membership 
list  and  is  not  allowed  to  transmit  data.^  Immediate  retransmission  for  this  node  is  not  allowed  and  it  can  retry 
transmission  in  the  next  round.  This  results  in  packet  dropouts.  Hence,  for  communication  architectures 
implemented  using  TTP/C,  it  is  important  to  consider  stability  and  performance  of  the  system  under  packet 
dropouts.  In  this  paper,  we  analyze  the  effect  of  packet  dropouts  on  the  stability  of  the  system  considering  single¬ 
packet  transmission  of  plant  inputs  and  outputs. 


III.  Decentralized  Distributed  Engine  Control  Systems 
A.  Decentralized  Distributed  Full  Authority  Engine  Control  (D^FADEC). 

Centralized  design  accounts  for  subsystem  interactions  and  provides  a  baseline  for  the  integrated  system.  The 
coupling  between  propulsion  systems  and  airframe  is  highly  significant;  therefore  the  propulsion  control  system  and 
flight  control  system  cannot  be  designed  separately.  Hence,  during  design  of  the  FADEC,  it  was  necessary  to  follow 
a  centralized  approach.  However,  the  performance  and  robustness  of  a  higher  order  centralized  control  system  is 
less  than  that  of  the  lower  order  subsystems.  Also  the  centralized  approach  does  not  consider  the  system 
nonlinearities  of  subsystems.  Controllers  based  on  the  decentralized  framework  allows  us  to  consider  the 
interactions  between  the  subsystems  and  at  the  same  time  optimizes  subsystem  performance.  This  approach  provides 
improved  component  fault-prognostics  and  fault-tolerance  while  reducing  the  processing  complexity.  The  use  of  a 
decentralized  multi-variable  control  algorithm  for  turbine  engine  control  is  well  discussed  in  the  engine  control 
community.  It  has  been  shown  that  the  use  of  decentralized  control  structure  not  only  improves  the  performance  of 
gas  turbine  engine,  but  also  reduces  the  number  of  controller  design  operating  points.  Also  the  controller  is  made 
more  robust  and  the  system  remains  stable  in  presence  of  soft  and/or  hard  failures.  Hence,  we  propose  a  controller 
based  on  Decentralized  Distributed  Control  Architecture,  namely  Decentralized  Distributed  Full  Authority  Engine 
Control  (D^ FADEC). 


B.  Mathematical  model  for  D^FADEC 

A  gas  turbine  engine  essentially  consists  of  interconnected  subsystems.  By  identifying  these  subsystems,  we  can 
take  advantage  of  the  structural  features  of  the  system  in  control  design.  If  we  are  not  able  to  identify  the 
subsystems,  we  can  decompose  the  entire  system  into  “mathematical”  subsystems.  These  kinds  of  partitions  of 
dynamic  subsystems  were  termed  as  physical  and  mathematical  decompositions  and  were  studied  by  Siljak.'^ 

Let  us  consider  a  linear  system  consisting  of  A  interconnected  subsystems 

S:  X  =  Ax  A  Bu  (1) 

y  =  Cx 

which  can  be  partitioned  into 

S:  Xi  =  AiXi  +  BiUi  +  'E/j=iiAijXj  +  BijUj)  (2) 
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where  £  ]R”‘  ,  £  ]R™‘  ,  y(fc+i).  ^  are  the  state,  input  and  output  of  subsystems,  5’,- 

A  more  compact  notation  for  the  above  system  is 

S:  X  =  Ai)X  +  B +  AqX  +  B qU  (3) 

y  =  C[)X  +  Cf^x  i  £  N 

where, 

^[)  —  diCL^ 

Bd  =  diag{Bi,B2,  —,Bp^] 

Cq  —  dicig ^C-^f  ^2^  ■■■  ^ 

and  coupling  block  matrices  are 

Ac  =  (Atj),  Be  =  (Bij),  Cc  =  (Cij) 


Consider  full  state  feedback  and  a  linear  constant  control  law  for  the  original  plant  S  can  be  chosen  as 

u  =  —Ky 

K  =  Ko+Kc 


(4) 


The  closed  loop  system  becomes, 

S\  X  =  {Aj)  —  B[,K[,  —  BqKj^^x  +  (df;  —  B(^K(^  —  Bi)Kq)x 


(5) 


5;  X  =  A^x  +  AcX 


where. 

Ad  —  (^Ad  —  Bd^d  —  B(^Kd^ 

Ac  —  (Ac  —  BcKc  —  BdKc} 

1.  Designing  the  local  controller,  Kd 

Now  we  shall  consider  the  selection  of  local  controller  gains  to  exponentially  stabilize  the  overall  system  to 
prescribed  degree.  As  we  want  the  subsystems  to  have  optimum  performance,  we  first  assume  that  there  are  no 
interactions  between  the  subsystems,  i.e.  =  0 

We  can  use  any  controller  design  method  to  find  local  controller  gains.  In  this  paper,  we  will  find  the  optimal 
gain  matrix,  Kd,  by  solving  the  discrete  time  algebraic  Riccati  equation  for  each  local  subsystem.  The  discrete 
time  algebraic  Riccati  equation  is  given  as 


\X,Ad,  -X,-  +  Rd^T" Bd^X^Ad,  +  =  0 


(6) 


(7) 

(8) 
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u'  =  -KdX 
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2.  Designing  the  global  controller,  Kq 

We  select  global  gain  matrix,  K^,  such  that  A(^  =  0,  which  corresponds  to  reducing  the  effect  of  the 
interconnections.*^  This  can  be  done  by  selecting 


Kc  — 

(9) 

=  —K^y 

(10) 

If  matrix  B  is  of  full  column  rank,  then  the  interactions  will  be  completely  nullified  and  =  0.  If  B  is  not 
of  full  column  rank,  then  =  0  and  we  will  have  to  ensure  that  the  closed  loop  system  remains  stable.  For  this 
we  consider  as  unstructured  perturbations  and  use  the  results  obtained  in  Ref  14  to  determine  system  stability. 

The  system,  (5)  is  stable  if  the  following  condition  is  satisfied. 

1  /2 

f^max(Ac)  <  -f^maxC^D)  +  {[(^max{h)f  +  (11) 

Where,  Q  =  I  and  P  is  solution  of  discrete  time  Lyapunov  Equation  solved  for  A^, 


C.  Mathematical  model  for  D^FADEC  considering  packet  droponts 

Consider  architecture  as  shown  in  Fig.  5.  Both  the  local  controller  and  global  controller  are  connected  through 
the  network.  These  controllers  can  be  physically  separated  from  each  other  or  can  be  housed  together.  For 
simplicity,  consider  a  plant  having  2  subsystems.  We  now  will  study  the  effect  of  packet  dropouts  on  the 
performance  of  the  closed  loop  system. 

The  packet  dropping  process  of  a  communication  network  in  discrete  time  can  be  modeled  as  either  an 
independent  and  identically  distributed  (i.i.d.)  Bernoulli  random  process  or  a  Markov  chain.  Flu  and  Yan  studied  the 
effect  of  packet  dropping  in  Ref  15.  They  modeled  the  packet  dropping  of  a  communication  network  as  an  i.i.d 
Bernoulli  process  and  studied  the  stability  of  a  discrete-time  NCS  with  static  state  feedback  where  the  PDF  of  the 
communication  network  is  bounded  by  a  known  upper  bound.  We  will  now  extend  their  results  for  a  controller 
under  decentralized  framework. 


Figure  5.  D^FADEC  with  distributed  Local  aud  Global  Coutroller 


The  network  is  assumed  to  be  modeled  by 


f (fe) x{k) 


(12) 


where,  f(k)  is  the  independent  and  identically  distributed  (i.i.d.)  Bernoulli  random  process.  f(k)  can  be  either  0 
or  1  at  any  time  instant  k.  Value  0  indicates  the  packet  is  lost  during  transmission  while  value  1  indicates 
successful  transmission  of  packet.  The  probability  of  f  (k)  =  0  is  termed  as  Packet  Dropping  Probability  (PDP) 
and  is  a  measure  of  the  reliability  of  the  network. 

Now,  when  the  packet  is  dropped,  f  (k)  =  0  i.e.,  u(k)  =  0.  If  the  packet  is  transmitted  successfully  f  (k)  =  1  and 
£(k)  =  x{k). 

Stability  Condition  for  NCS:  The  networked  plant  with  PDP  equal  to  the  constant  a  is  ms-stabilized  (stabilized  in 
mean-square  sense)  by  the  controller  if  and  only  if  the  following  condition  holds'^: 

p\aA  0  d  -f  (1  —  a)d  0  d]  <  1  (13) 

where,  0  is  the  Kronecker  product  and  p(-)  is  the  spectral  radius  of  the  matrix  and  A  =  A  —  BK 

Hu  and  Yan  introduced  a  term  known  as  Packet  Dropping  Margin  (PDM)  which  is  defined  as  the  largest  positive 
bound  a  such  that  the  system  is  ms-stable  for  any  PDP  less  than  a.  They  gave  a  formula  to  find  PDM  which  is  as 
follows.'^: 

If  the  NCS  is  nominally  stable,  then. 


PDM  = 


1 

im 


(14) 


where. 


V  = 


(505-1-50  5)(7  -  5  0  5)-i 
(7-50  5)-i 


5  05 
0 


(15) 


5=d0d,  5=d0d-d0d 

Also,  they  gave  a  lower  bound  for  PDM,  which  is  dependent  on  the  K2  (d) 


PDM  > 


1-P^W 

Ki{A)\\A\\l-p^iA) 


(16) 


It  is  observed  that  PDM  is  inversely  proportional  to  7^2  (d).  Hence,  Hu  and  Yan  proposed  an  algorithm  to 
maximize  PDM  by  minimizing  K2  (d). 


Now  we  will  study  two  types  of  system,  one  where  each  subsystem  has  independent  control  and  one  where  each 
control  input  affects  two  or  more  subsystems. 


7.  Case  I:  B  1^  =  0 

When  Be  =  0  ,  closed  loop  system  reduces  to  following  form 

S-.  x  =  (do  -  BMx  +  (Ac  -  BoKc)x  (17) 


or  in  compact  form, 
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S:  X  =  A[)X  +  AcX 


In  order  to  reduce  the  effect  of  interactions,  we  make  =  0  by  selecting 

Kc  =  Bd'*Ac 


(18) 


Example  1:  In  order  to  compare  decentralized  and  centralized  controller,  we  consider  an  example  from 
literature.*^ 


1.2 

0.1 

- 

-0.3 

0.5 

-0.2 

- 

-0.3 

L-2.5 

1.8 

0  . 

1 

0 

0 

B  = 

0 

0.5 

0 

.0 

0 

1. 

And  the  desired  nominal  closed  loops  as  -0.7053,  0.4777±0.4535i 

Algorithm  proposed  by  Hu-Yan  is  used  to  find  a  feedback  gain  which  maximizes  PDM.  This  gain  yields  a  PDM 

of  0.3449  and  k'2(^)  =  1-0709 

We  design  a  decentralized  controller  for  above  system. 


0.7223 

0.5535 

0 

0 

0 

-0.3 

7fc  = 

0.0930 

-1.3554 

0 

,  Kc  = 

0 

0 

-0.6 

.  0 

0 

0.7053. 

.-2.5 

1.8 

0  . 

This  gain  yields  POM^s  =  0.39  ,  K2{A)  =  1.0708 

We  observe  that  there  is  significant  improvement  in  PDM  for  the  same  nominal  closed  loop  poles.  We  also 
observe  that  with  7^2  C-^)  obtained  with  the  use  of  a  controller  in  decentralized  framework,  is  lower  than  7^2  C-^) 
obtained  by  Hu  and  Yan  algorithm.  This  shows  that  PDM  is  dependent  on  the  structure  of  A.  As  we  no  longer 
have  to  solve  the  minimization  problem,  the  computational  effort  and  time  is  significantly  reduced.  Hence,  use  of 
decentralized  controller  gives  a  lower  K2  (A),  with  higher  PDM  and  with  less  computational  effort. 

2.  Case  II:  Bq  ^  0 

For  this  case,  the  closed  loop  system  becomes, 

S-.  x  =  (Ac  -  +  (^c  -  BcKd  -  BcKc  -  B^Kc^x  (19) 


X  =  (Ac  -  BaKa)x  +  (Ac  -  BKc)x 


where,  Ac  =  Ac  —  BqKj^ 


or  in  compact  form. 


S:  X  =  A[)X  +  AcX 


In  order  to  reduce  the  effect  of  interactions,  we  make  Ac  =  0  by  selecting 

Kc  =  B^Tc 


(20) 


11 

American  Institute  of  Aeronautics  and  Astronautics 


Example  2: 


We  now  study  the  effeet  of  paeket  dropouts  for  a  FIDO  engine  under  deeentralized  framework.  The  model  is 
obtained  from  Ref  1 8.  The  eontinuous  time  model  is  eonverted  into  a  diserete  time  model  with  sampling  time  of 
0.01  s. 

Let  the  networked  plant  (l)-(4)  be  as  shown  below. 


0.9598 

0.0365 

-4.6317 

0.0608 

0.0482 

-0.0332- 

0.0003 

0.9708 

-0.5745 

0.0012 

0.0199 

0.1221 

0.0003 

0.0001 

0.9556 

0.0000 

0.0014 

0.0010 

0.0085 

-0.0204 

-2.5621 

0.6065 

-0.0057 

-0.0920 

0.0004 

-0.0009 

-0.1158 

-0.0156 

0.9799 

-0.0042 

-0.0000 

0.0000 

-0.0059 

0.0000 

0.0001 

0.9934  - 

-  0.0108 

1.6642 

-0.9764 

0.0851  ■ 

0.0091 

-0.3464 

-0.0142 

-0.5932 

B  = 

-0.0001 

-0.7790 

0.0116 

0.0036 

0.0444 

0.2358 

-0.1646 

0.3287 

0.0020 

0.0103 

-0.0074 

0.0148 

-  0.0001 

-0.0008 

-0.0003 

0.0007  - 

—  ^6X6 

to 

II 

o 

As  the  physieal  subsystems  are  not  known,  we  will  study  the  effeet  of  mathematieal  partitioning  on  PDM  for  the 
NCS  as  shown  above.  The  loeal  eontroller  gain,  is  obtained  using  pole  plaeement  teehnique  for  desired  elosed 
loop  poles  0.02  ±  0.5i,  0.2,  0.7,  0.9801  and  0.9936.  Global  eontroller,  Kq  was  ealeulated  using  Eqn.  20. 


Type  of  Partitioning 

PDM 

K^iA) 

Centralized  arehiteeture 

0.1955 

4.9792 

^2x2  g2xl  ^4X4  ^4X3 

0.0117 

5.4766e+004 

^2x2  ^2x2  ^4X4  ^4x2 

1.0386 

4.9759 

^2x2  q2x3  ^4x4  ^4x1 

1.0394 

2.0832e+004 

^3x3  q2x1  ^3x3  q3x3 

1.1140e-007 

2.5205e+010 

^3x3  q3x2  ^3x3  q3x2 

0.3204 

4.9717 

j^3x3  q3x3  j^3x3  q2x1 

1.0338 

4.9688 

3.7273e-008 

3.5374e+009 

^4X4  ^4x2  ^2x2  q2x2 

0.3285 

77.4584 

^4X4  ^4X3  ^2x2  g2xl 

0.3835 

35.7265 

Table  1.  Table  to  show  dependence  of  PDM  on  tbe  partitioning 

From  the  above  table,  it  ean  be  observed  that  eentralized  eontroller  gives  a  PDM  of  0.1955.  The  data 
transmission  effieieney  of  TTP/C  being  70%-90%,  it  has  a  PDM  of  0.3.  The  PDM  for  eentralized  eontroller  being 
less  than  that  of  TTP/C,  FADEC  based  on  eentralized  arehiteeture  ean  beeome  unstable  when  DCS  is  implemented 
using  TTP/C.  Flowever,  we  observe  that  the  PDM  depends  on  the  system  partitioning  and  by  seleeting  a  suitable 
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system  partition;  we  can  obtain  a  large  PDM.  For  the  above  example,  we  select  partition  given  as 
^2x2  jj2x2^^4x4jj4x2  gives  largest  PDM  with  small  K2{A). 

If  the  nominal  closed  loop  poles  are  not  given,  we  can  use  Eqn.  6  to  obtain  local  controller  gain,  K^,  which  can 
be  thought  of  optimizing  the  subsystems.  Such  physical  partitioning  can  be  done  only  when  the  subsystem  models 
are  known.  Physical  partitioning  was  also  performed  for  the  same  engine  model.  It  was  observed  that  PDM  for 
physical  partitioning  is  also  dependent  on  the  system  partitioning  and  the  same  partition,  , 

gives  largest  PDM. 


IV.  Conclusions 

Advanced  future  propulsion  control  demands  for  an  intelligent,  fault  tolerant  systems  and  it  is  necessary  develop  a 
new  control  system.  The  benefits  of  Distributed  Controls  Systems  are  beginning  to  be  recognized  in  the  engine 
community.  In  this  paper,  use  of  TTP/C  as  a  communication  architecture  is  highlighted.  Distributed  Engine 
Control  under  Decentralized  Framework  is  proposed  for  achieving  high  performance,  low  cost  and  fault  tolerant 
control  systems.  Based  on  this  framework.  Decentralized  Distributed  Full  Authority  Engine  Control  (D^FADEC) 
is  introduced  and  a  mathematical  model  consisting  of  two-  level  controller  structure  is  formed.  Two  such 
mathematical  models  of  DCS  are  analyzed  for  performance  under  packet  dropouts.  Using  the  concept  of  PDM,  it 
is  shown  that  use  of  decentralized  architecture  is  advantageous  over  centralized  architecture.  In  first  case,  it  is 
shown  that  the  PDM  is  dependent  on  the  structure  of  the  closed-loop  matrix;  nullifying  the  effect  of  interactions 
can  therefore  result  in  a  significant  improvement  of  PDM.  We  also  observe  that  PDM  is  less  dependent  on 
condition  number  and  more  dependent  on  the  subsystem  interactions.  In  the  second  case,  this  property  is  exploited 
and  the  centralized  system  is  decoupled  to  ensure  that  the  effects  of  interactions  are  reduced.  We  apply  this  theory 
to  a  FIDO  engine  model  available  in  literature  and  observe  that  the  PDM  also  depends  on  the  system  partitioning. 
By  selecting  a  suitable  mathematical  partition,  we  can  obtain  a  large  PDM,  given  that  the  system  has  prescribed 
nominal  closed-loop  poles.  The  same  results  can  be  extended  to  case  of  where  the  control  input  is  also  subject  to 
packet  dropouts. 
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